Edit tour

Linux Analysis Report
Aqua.i686.elf

Overview

General Information

Sample name:	Aqua.i686.elf
Analysis ID:	1578047
MD5:	5d14cf8d9e6696a9ef42ce5b251a2a1f
SHA1:	6739c14048b64da4fdc445312207f21ccb05e060
SHA256:	b303756919f73d36c6caa7926ed6e212c1040ca7406ec5c461632f714771021b
Tags:	elfGafgytuser-lontze7
Infos:

Detection

Mirai

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample deletes itself

Sends malformed DNS queries

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample has stripped symbol table

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578047
Start date and time:	2024-12-19 08:07:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.i686.elf
Detection:	MAL
Classification:	mal84.troj.evad.linELF@0/0@201/0

Runtime Messages

Command:	/tmp/Aqua.i686.elf
PID:	5425
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 5412, Parent: 3591)

rm (PID: 5412, Parent: 3591, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07

dash New Fork (PID: 5413, Parent: 3591)

rm (PID: 5413, Parent: 3591, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07

Aqua.i686.elf (PID: 5425, Parent: 5347, MD5: 5d14cf8d9e6696a9ef42ce5b251a2a1f) Arguments: /tmp/Aqua.i686.elf

Aqua.i686.elf New Fork (PID: 5426, Parent: 5425)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.i686.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Aqua.i686.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1338c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13404:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13418:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1342c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1347c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Aqua.i686.elf	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x7a6f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
Aqua.i686.elf	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x7a22:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
Aqua.i686.elf	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x912d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x91cd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
Aqua.i686.elf	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x5e2:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
Aqua.i686.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x97c2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Aqua.i686.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xddda:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 3 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5425.1.0000000008048000.000000000805e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1338c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x133f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13404:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13418:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1342c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13440:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13454:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13468:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1347c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x7a6f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x7a22:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x912d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x91cd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x5e2:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x97c2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5425.1.0000000008048000.000000000805e000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xddda:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Process Memory Space: Aqua.i686.elf PID: 5425	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Aqua.i686.elf PID: 5425	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc56:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc6a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc7e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc92:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xce2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcf6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd6e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd82:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd96:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdbe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 5 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Aqua.i686.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: Aqua.i686.elf	ReversingLabs: Detection: 52%
Source: Aqua.i686.elf	Virustotal: Detection: 38%			Perma Link

Machine Learning detection for sample

Source: Aqua.i686.elf

Joe Sandbox ML: detected

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.cardiacpure.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.13:44220 -> 178.215.238.25:33966

Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru. [malformed]

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: Process Memory Space: Aqua.i686.elf PID: 5425, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: Process Memory Space: Aqua.i686.elf PID: 5425, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal84.troj.evad.linELF@0/0@201/0

Source: /usr/bin/dash (PID: 5412)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07			Jump to behavior
Source: /usr/bin/dash (PID: 5413)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.i686.elf (PID: 5426)

File: /tmp/Aqua.i686.elf

Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: Aqua.i686.elf, type: SAMPLE
Source: Yara match	File source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.i686.elf PID: 5425, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: Aqua.i686.elf, type: SAMPLE
Source: Yara match	File source: 5425.1.0000000008048000.000000000805e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.i686.elf PID: 5425, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 File Deletion	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.i686.elf	53%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.i686.elf	38%	Virustotal		Browse
Aqua.i686.elf	100%	Avira	EXP/ELF.Mirai.Z.A
Aqua.i686.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.cardiacpure.ru	178.215.238.25	true	false		high
raw.cardiacpure.ru. [malformed]	unknown	unknown	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.25	raw.cardiacpure.ru	Germany		10753	LVLT-10753US	false

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.cardiacpure.ru	vkjqpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.4
	dwhdbg.elf	Get hash	malicious	Mirai	Browse	178.215.238.4
	qkehusl.elf	Get hash	malicious	Mirai	Browse	178.215.238.4
	vsbeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.4

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
LVLT-10753US	Employee Benefits & Bonus Docs 2024.vbs	Get hash	malicious	AsyncRAT, VenomRAT	Browse	45.88.88.7
	bot.mpsl.elf	Get hash	malicious	Mirai	Browse	94.154.174.120
	CPNSQusnwC.exe	Get hash	malicious	DCRat	Browse	45.88.91.89
	b3astmode.sh4.elf	Get hash	malicious	Mirai	Browse	147.3.223.242
	jade.m68k.elf	Get hash	malicious	Mirai	Browse	94.154.174.147
	jade.mips.elf	Get hash	malicious	Mirai	Browse	64.8.51.71
	jade.spc.elf	Get hash	malicious	Mirai	Browse	94.154.174.107
	file.exe	Get hash	malicious	Unknown	Browse	94.154.172.218
	jew.arm.elf	Get hash	malicious	Unknown	Browse	148.57.27.159
	Needed Aircraft PN#_Desc_&_Qty Details.vbs	Get hash	malicious	AsyncRAT, VenomRAT	Browse	45.88.88.7

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.730948045615057
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Aqua.i686.elf
File size:	104'872 bytes
MD5:	5d14cf8d9e6696a9ef42ce5b251a2a1f
SHA1:	6739c14048b64da4fdc445312207f21ccb05e060
SHA256:	b303756919f73d36c6caa7926ed6e212c1040ca7406ec5c461632f714771021b
SHA512:	83a7473ccc0ec33211299dbddf6e4d43373e66b4c6be6b1d51f978242085f16de13d66af2c10e42b46aa313f6c25a2f1ee50cbb45996078f5e9dec3b718344e5
SSDEEP:	3072:40fcV8u11TUV5aUEMH6mH8KRZwJUCF7lWF:40fcV8u11TsaUECaW
TLSH:	3AA339C0F94BC1F5D493093010A7F73FDB31D1A95121DA6EEFA9AE32EA67543821A64C
File Content Preview:	.ELF....................h...4...........4. ...(......................P...P...............P...........G..............Q.td............................U..S.......S`...h....s*..[]...$.............U......=.'...t..1...................u........t...$............'

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	104472
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0x12aa1	0x0	0x6	AX	16
.fini	PROGBITS	0x805ab51	0x12b51	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x805ab80	0x12b80	0x2553	0x0	0x2	A	32
.ctors	PROGBITS	0x805e0d8	0x150d8	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x805e0e4	0x150e4	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x805e100	0x15100	0x46d8	0x0	0x3	WA	32
.bss	NOBITS	0x80627e0	0x197d8	0x490c	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x197d8	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x150d3	0x150d3	6.4460	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x150d8	0x805e0d8	0x805e0d8	0x4700	0x9014	0.3099	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:08:03.760082960 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:03.879676104 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:03.879918098 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:03.880008936 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:03.999613047 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:03.999927998 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:04.119673014 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:05.147556067 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:05.147666931 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:05.147701025 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:06.378961086 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:06.498502970 CET	33966	44222	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:06.498684883 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:06.498718977 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:06.618422031 CET	33966	44222	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:06.618577957 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:06.738115072 CET	33966	44222	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:07.764277935 CET	33966	44222	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:07.764415979 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:07.764456034 CET	44222	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:08.993590117 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:09.113503933 CET	33966	44224	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:09.113629103 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:09.113766909 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:09.233274937 CET	33966	44224	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:09.233407021 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:09.353130102 CET	33966	44224	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:10.377610922 CET	33966	44224	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:10.377868891 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:10.377912998 CET	44224	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:11.608808994 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:11.728401899 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:11.728553057 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:11.728610992 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:11.848278046 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:11.848371983 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:11.968138933 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:12.994324923 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:12.994561911 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:12.994702101 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:14.224596977 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:14.344552040 CET	33966	44228	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:14.344731092 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:14.344878912 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:14.464529037 CET	33966	44228	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:14.464695930 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:14.584620953 CET	33966	44228	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:15.616089106 CET	33966	44228	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:15.616430044 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:15.616430044 CET	44228	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:16.844623089 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:16.964596987 CET	33966	44230	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:16.964890957 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:16.964947939 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:17.084537029 CET	33966	44230	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:17.084851027 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:17.204410076 CET	33966	44230	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:18.230139017 CET	33966	44230	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:18.230266094 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:18.230298996 CET	44230	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:19.460834980 CET	44232	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:19.580709934 CET	33966	44232	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:19.580857038 CET	44232	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:19.580933094 CET	44232	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:19.700634956 CET	33966	44232	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:19.700807095 CET	44232	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:19.820519924 CET	33966	44232	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:40.754175901 CET	33966	44232	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:40.754370928 CET	44232	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:40.873800993 CET	33966	44232	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:42.982115984 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:43.101797104 CET	33966	44234	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:43.101947069 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:43.102097988 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:43.221649885 CET	33966	44234	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:43.221762896 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:43.341337919 CET	33966	44234	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:44.375144958 CET	33966	44234	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:44.375258923 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:44.375346899 CET	44234	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:45.606767893 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:45.726325035 CET	33966	44236	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:45.726527929 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:45.726645947 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:45.846191883 CET	33966	44236	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:45.846326113 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:45.966803074 CET	33966	44236	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:46.991405964 CET	33966	44236	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:46.991508961 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:46.991539001 CET	44236	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:48.221863985 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:48.341407061 CET	33966	44238	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:48.341540098 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:48.341609955 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:48.461222887 CET	33966	44238	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:48.461342096 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:48.581031084 CET	33966	44238	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:49.607774973 CET	33966	44238	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:49.607968092 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:49.608000994 CET	44238	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:50.968039036 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:51.087658882 CET	33966	44240	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:51.087825060 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:51.087940931 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:51.207325935 CET	33966	44240	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:51.207499027 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:51.328064919 CET	33966	44240	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:52.357805014 CET	33966	44240	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:52.357949018 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:52.357984066 CET	44240	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:53.586520910 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:53.706002951 CET	33966	44242	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:53.706203938 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:53.706296921 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:53.825817108 CET	33966	44242	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:53.825905085 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:53.945688009 CET	33966	44242	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:54.972456932 CET	33966	44242	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:54.972584963 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:54.972614050 CET	44242	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:56.208729029 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:56.328938961 CET	33966	44244	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:56.329122066 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:56.329201937 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:56.449593067 CET	33966	44244	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:56.449878931 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:56.571651936 CET	33966	44244	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:57.603991985 CET	33966	44244	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:57.604165077 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:57.604433060 CET	44244	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:58.833617926 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:58.953844070 CET	33966	44246	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:58.954029083 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:58.954094887 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:59.073649883 CET	33966	44246	178.215.238.25	192.168.2.13
Dec 19, 2024 08:08:59.073808908 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:08:59.193294048 CET	33966	44246	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:00.220654964 CET	33966	44246	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:00.220815897 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:00.220870018 CET	44246	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:01.452368021 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:01.571940899 CET	33966	44248	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:01.572120905 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:01.572199106 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:01.691879988 CET	33966	44248	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:01.692051888 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:01.811619997 CET	33966	44248	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:02.839572906 CET	33966	44248	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:02.839716911 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:02.839776993 CET	44248	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:04.067039013 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:04.186685085 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:04.186906099 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:04.187055111 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:04.306575060 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:04.306745052 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:04.426522017 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:05.452625036 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:05.452764034 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:05.452774048 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:06.683617115 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:06.805428982 CET	33966	44252	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:06.805607080 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:06.805779934 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:06.927346945 CET	33966	44252	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:06.927633047 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:07.047175884 CET	33966	44252	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:08.069849014 CET	33966	44252	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:08.070101976 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:08.070101976 CET	44252	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:09.306807995 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:09.426785946 CET	33966	44254	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:09.427018881 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:09.427331924 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:09.546816111 CET	33966	44254	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:09.547100067 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:09.666717052 CET	33966	44254	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:10.691354990 CET	33966	44254	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:10.691530943 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:10.691725969 CET	44254	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:11.923681974 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:12.043298006 CET	33966	44256	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:12.043510914 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:12.043777943 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:12.163242102 CET	33966	44256	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:12.163379908 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:12.283288002 CET	33966	44256	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:13.309005976 CET	33966	44256	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:13.309185028 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:13.309199095 CET	44256	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:14.719057083 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:14.838540077 CET	33966	44258	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:14.838845015 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:14.839014053 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:14.958571911 CET	33966	44258	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:14.958858967 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:15.078329086 CET	33966	44258	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:16.103705883 CET	33966	44258	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:16.103837013 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:16.103857040 CET	44258	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:17.330694914 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:17.450201035 CET	33966	44260	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:17.450499058 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:17.450649977 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:17.570081949 CET	33966	44260	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:17.570353985 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:17.689862967 CET	33966	44260	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:18.714797974 CET	33966	44260	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:18.714921951 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:18.714946985 CET	44260	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:19.941988945 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:20.061573029 CET	33966	44262	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:20.061737061 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:20.061880112 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:20.181529045 CET	33966	44262	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:20.181720972 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:20.301367044 CET	33966	44262	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:21.327586889 CET	33966	44262	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:21.327783108 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:21.327876091 CET	44262	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:22.556827068 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:22.676496029 CET	33966	44264	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:22.676749945 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:22.676912069 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:22.796375036 CET	33966	44264	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:22.796685934 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:22.916378975 CET	33966	44264	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:23.941951036 CET	33966	44264	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:23.942362070 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:23.942425013 CET	44264	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:25.169584036 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:25.289092064 CET	33966	44266	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:25.289223909 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:25.289300919 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:25.408767939 CET	33966	44266	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:25.408879995 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:25.528333902 CET	33966	44266	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:26.555046082 CET	33966	44266	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:26.555217028 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:26.555355072 CET	44266	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:27.783266068 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:27.902793884 CET	33966	44268	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:27.902890921 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:27.902931929 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:28.022505999 CET	33966	44268	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:28.022744894 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:28.142294884 CET	33966	44268	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:29.168392897 CET	33966	44268	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:29.168714046 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:29.168801069 CET	44268	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:30.403065920 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:30.522531033 CET	33966	44270	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:30.522685051 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:30.522754908 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:30.642330885 CET	33966	44270	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:30.642517090 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:30.762008905 CET	33966	44270	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:31.788901091 CET	33966	44270	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:31.789127111 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:31.789127111 CET	44270	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:33.019268990 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:33.138744116 CET	33966	44272	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:33.138885021 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:33.139027119 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:33.258450031 CET	33966	44272	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:33.258621931 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:33.379132032 CET	33966	44272	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:34.402786016 CET	33966	44272	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:34.403044939 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:34.403129101 CET	44272	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:35.632531881 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:35.751993895 CET	33966	44274	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:35.752170086 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:35.752304077 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:35.871761084 CET	33966	44274	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:35.871880054 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:35.991379976 CET	33966	44274	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:37.153646946 CET	33966	44274	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:37.153868914 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:37.154036045 CET	44274	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:38.379410982 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:38.498903036 CET	33966	44276	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:38.499098063 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:38.499150991 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:38.618630886 CET	33966	44276	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:38.618746996 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:38.738200903 CET	33966	44276	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:39.764925957 CET	33966	44276	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:39.765084982 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:39.765167952 CET	44276	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:40.991252899 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:41.111016989 CET	33966	44278	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:41.111180067 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:41.111270905 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:41.230680943 CET	33966	44278	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:41.230833054 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:41.350375891 CET	33966	44278	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:42.376144886 CET	33966	44278	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:42.376286030 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:42.376322985 CET	44278	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:43.606297016 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:43.725892067 CET	33966	44280	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:43.726033926 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:43.726115942 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:43.845588923 CET	33966	44280	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:43.845726013 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:43.965269089 CET	33966	44280	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:44.991326094 CET	33966	44280	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:44.991525888 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:44.991561890 CET	44280	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:46.223401070 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:46.343842030 CET	33966	44282	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:46.344006062 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:46.344125032 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:46.463506937 CET	33966	44282	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:46.463639975 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:46.583158970 CET	33966	44282	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:47.610411882 CET	33966	44282	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:47.610580921 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:47.610613108 CET	44282	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:48.842158079 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:48.961755991 CET	33966	44284	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:48.961956024 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:48.962071896 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:49.081531048 CET	33966	44284	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:49.081635952 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:49.201101065 CET	33966	44284	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:50.230361938 CET	33966	44284	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:50.230684042 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:50.230753899 CET	44284	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:51.458923101 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:51.578469038 CET	33966	44286	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:51.578731060 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:51.578795910 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:51.698339939 CET	33966	44286	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:51.698620081 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:51.818052053 CET	33966	44286	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:52.843230009 CET	33966	44286	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:52.843360901 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:52.843480110 CET	44286	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:54.074131966 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:54.195683956 CET	33966	44288	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:54.195951939 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:54.196162939 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:54.315661907 CET	33966	44288	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:54.315809965 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:54.435305119 CET	33966	44288	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:55.463001013 CET	33966	44288	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:55.463211060 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:55.463263035 CET	44288	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:56.690676928 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:56.810296059 CET	33966	44290	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:56.810478926 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:56.810607910 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:56.930046082 CET	33966	44290	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:56.930208921 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:57.049683094 CET	33966	44290	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:58.075397968 CET	33966	44290	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:58.075639963 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:58.075711966 CET	44290	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:59.301930904 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:59.421505928 CET	33966	44292	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:59.421619892 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:59.421770096 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:59.541338921 CET	33966	44292	178.215.238.25	192.168.2.13
Dec 19, 2024 08:09:59.541486979 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:09:59.660994053 CET	33966	44292	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:00.688667059 CET	33966	44292	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:00.688926935 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:00.689110994 CET	44292	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:01.919914007 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:02.039412022 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:02.039704084 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:02.039750099 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:02.159405947 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:02.159593105 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:02.279230118 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:03.305078030 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:03.305262089 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:03.305325985 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:04.539423943 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:04.658983946 CET	33966	44296	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:04.659184933 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:04.659292936 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:04.779270887 CET	33966	44296	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:04.779491901 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:04.899034977 CET	33966	44296	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:05.924585104 CET	33966	44296	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:05.924777031 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:05.924819946 CET	44296	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:07.161839008 CET	44298	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:07.281271935 CET	33966	44298	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:07.281440020 CET	44298	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:07.281559944 CET	44298	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:07.400971889 CET	33966	44298	178.215.238.25	192.168.2.13
Dec 19, 2024 08:10:07.401171923 CET	44298	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 08:10:07.520600080 CET	33966	44298	178.215.238.25	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:08:03.011205912 CET	40784	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.145689964 CET	53	40784	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:03.146030903 CET	39300	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.268471956 CET	53	39300	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:03.268704891 CET	51493	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.391257048 CET	53	51493	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:03.391586065 CET	46670	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.513853073 CET	53	46670	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:03.514072895 CET	46813	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.636590004 CET	53	46813	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:03.636929035 CET	49578	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:03.759785891 CET	53	49578	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.147762060 CET	35481	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.270023108 CET	53	35481	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.270360947 CET	48453	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.392736912 CET	53	48453	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.393115044 CET	41176	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.516521931 CET	53	41176	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.516786098 CET	39635	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.639302015 CET	53	39635	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.639657974 CET	56988	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.761998892 CET	53	56988	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.762435913 CET	41830	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:05.885334969 CET	53	41830	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:05.885696888 CET	46601	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:06.008512020 CET	53	46601	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:06.008897066 CET	35062	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:06.131279945 CET	53	35062	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:06.131519079 CET	43383	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:06.256057978 CET	53	43383	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:06.256504059 CET	49801	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:06.378735065 CET	53	49801	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:07.764529943 CET	60717	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:07.887077093 CET	53	60717	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:07.887296915 CET	55073	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.009830952 CET	53	55073	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.010133028 CET	52599	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.132682085 CET	53	52599	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.132877111 CET	43117	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.255346060 CET	53	43117	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.255601883 CET	33382	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.378750086 CET	53	33382	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.379174948 CET	57554	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.501709938 CET	53	57554	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.502125978 CET	47393	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.624526024 CET	53	47393	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.624757051 CET	40937	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.747507095 CET	53	40937	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.747687101 CET	59527	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.870400906 CET	53	59527	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:08.870747089 CET	48248	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:08.993302107 CET	53	48248	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.377968073 CET	54391	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:10.500361919 CET	53	54391	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.500655890 CET	35306	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:10.622998953 CET	53	35306	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.623258114 CET	53408	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:10.745671988 CET	53	53408	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.746068001 CET	46406	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:10.868477106 CET	53	46406	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.868799925 CET	35209	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:10.994107008 CET	53	35209	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:10.994374037 CET	57027	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:11.116972923 CET	53	57027	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:11.117257118 CET	50936	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:11.239844084 CET	53	50936	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:11.240087032 CET	46018	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:11.362744093 CET	53	46018	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:11.362991095 CET	48657	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:11.485359907 CET	53	48657	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:11.485584021 CET	58020	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:11.608551025 CET	53	58020	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:12.994832039 CET	43570	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.117189884 CET	53	43570	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.117737055 CET	55645	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.240286112 CET	53	55645	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.240575075 CET	32798	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.363163948 CET	53	32798	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.363522053 CET	39905	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.485943079 CET	53	39905	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.486340046 CET	49542	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.608771086 CET	53	49542	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.609131098 CET	55231	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.731689930 CET	53	55231	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.731976986 CET	36925	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.854435921 CET	53	36925	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.854716063 CET	44957	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:13.977150917 CET	53	44957	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:13.977473974 CET	49353	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:14.100173950 CET	53	49353	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:14.100594044 CET	55992	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:14.224200010 CET	53	55992	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:15.616413116 CET	39352	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:15.738922119 CET	53	39352	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:15.739243031 CET	47856	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:15.861607075 CET	53	47856	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:15.861871958 CET	55595	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:15.984420061 CET	53	55595	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:15.984685898 CET	41844	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.107117891 CET	53	41844	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.107326984 CET	40865	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.229598999 CET	53	40865	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.229895115 CET	51947	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.352169037 CET	53	51947	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.352394104 CET	53358	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.474591017 CET	53	53358	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.474889994 CET	52334	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.597384930 CET	53	52334	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.597709894 CET	59306	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.721256971 CET	53	59306	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:16.721551895 CET	46075	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:16.844259024 CET	53	46075	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.230371952 CET	38466	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.352905989 CET	53	38466	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.354701996 CET	43890	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.477065086 CET	53	43890	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.477243900 CET	46572	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.599983931 CET	53	46572	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.600205898 CET	54018	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.722546101 CET	53	54018	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.723341942 CET	56600	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.845926046 CET	53	56600	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.846442938 CET	55784	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:18.969288111 CET	53	55784	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:18.969667912 CET	53056	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:19.092181921 CET	53	53056	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:19.092633009 CET	36634	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:19.215059996 CET	53	36634	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:19.215325117 CET	50114	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:19.337842941 CET	53	50114	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:19.338270903 CET	55827	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:19.460597992 CET	53	55827	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:41.755846024 CET	40398	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:41.878083944 CET	53	40398	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:41.878341913 CET	60569	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.000612020 CET	53	60569	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.000833035 CET	46873	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.123174906 CET	53	46873	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.123589993 CET	38825	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.245932102 CET	53	38825	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.246357918 CET	35387	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.368697882 CET	53	35387	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.368899107 CET	51528	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.491184950 CET	53	51528	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.491388083 CET	38102	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.613648891 CET	53	38102	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.613853931 CET	60523	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.736175060 CET	53	60523	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.736639023 CET	35141	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.858921051 CET	53	35141	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:42.859330893 CET	45651	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:42.981756926 CET	53	45651	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.375462055 CET	52946	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:44.498495102 CET	53	52946	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.498800993 CET	58524	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:44.622239113 CET	53	58524	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.622504950 CET	46361	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:44.745839119 CET	53	46361	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.746057987 CET	60833	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:44.869399071 CET	53	60833	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.869761944 CET	38844	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:44.992055893 CET	53	38844	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:44.992288113 CET	57660	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:45.114552975 CET	53	57660	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:45.114806890 CET	47460	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:45.237967014 CET	53	47460	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:45.238141060 CET	44809	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:45.361253977 CET	53	44809	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:45.361491919 CET	58902	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:45.483871937 CET	53	58902	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:45.484158039 CET	52726	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:45.606548071 CET	53	52726	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:46.991602898 CET	52610	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.115482092 CET	53	52610	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.115755081 CET	56170	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.238277912 CET	53	56170	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.238673925 CET	58393	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.360915899 CET	53	58393	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.361344099 CET	59615	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.484014988 CET	53	59615	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.484601974 CET	45208	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.607014894 CET	53	45208	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.607358932 CET	46305	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.729707003 CET	53	46305	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.730067015 CET	45767	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.853806973 CET	53	45767	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.854186058 CET	38183	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:47.976437092 CET	53	38183	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:47.976768970 CET	43307	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:48.099013090 CET	53	43307	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:48.099210978 CET	51796	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:48.221653938 CET	53	51796	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:49.608055115 CET	56008	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:49.849153996 CET	53	56008	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:49.849545956 CET	48041	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:49.976650953 CET	53	48041	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:49.977078915 CET	48178	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.101391077 CET	53	48178	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.101783037 CET	46525	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.224458933 CET	53	46525	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.224690914 CET	38374	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.347081900 CET	53	38374	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.347378969 CET	49359	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.471092939 CET	53	49359	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.471355915 CET	49291	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.594162941 CET	53	49291	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.594439030 CET	35819	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.720581055 CET	53	35819	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.720889091 CET	48644	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.843837023 CET	53	48644	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:50.844376087 CET	37424	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:50.967595100 CET	53	37424	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.358067036 CET	34186	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:52.481194973 CET	53	34186	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.481746912 CET	36562	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:52.604199886 CET	53	36562	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.604697943 CET	45281	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:52.727042913 CET	53	45281	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.727257967 CET	58411	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:52.849654913 CET	53	58411	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.849905968 CET	47699	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:52.972342014 CET	53	47699	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:52.972598076 CET	32952	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:53.095767021 CET	53	32952	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:53.096040010 CET	35243	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:53.218384027 CET	53	35243	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:53.218599081 CET	46242	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:53.340821028 CET	53	46242	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:53.341017962 CET	53956	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:53.463978052 CET	53	53956	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:53.464163065 CET	53644	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:53.586328983 CET	53	53644	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:54.972700119 CET	50360	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.099379063 CET	53	50360	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.099890947 CET	38605	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.222409010 CET	53	38605	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.222630978 CET	54922	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.345662117 CET	53	54922	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.346010923 CET	43761	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.470639944 CET	53	43761	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.471100092 CET	35770	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.593498945 CET	53	35770	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.593830109 CET	59673	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.716345072 CET	53	59673	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.716805935 CET	48752	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.839173079 CET	53	48752	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.839478970 CET	33069	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:55.962014914 CET	53	33069	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:55.962619066 CET	41827	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:56.084944963 CET	53	41827	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:56.085247993 CET	46346	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:56.208415985 CET	53	46346	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:57.604574919 CET	49395	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:57.726779938 CET	53	49395	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:57.727087021 CET	53820	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:57.850151062 CET	53	53820	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:57.850630045 CET	58124	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:57.973083973 CET	53	58124	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:57.973439932 CET	45572	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.097038031 CET	53	45572	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.097433090 CET	54226	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.219862938 CET	53	54226	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.220122099 CET	42296	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.342426062 CET	53	42296	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.342602968 CET	42419	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.464884043 CET	53	42419	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.465188980 CET	45991	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.587697029 CET	53	45991	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.588063002 CET	39432	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.710788012 CET	53	39432	8.8.8.8	192.168.2.13
Dec 19, 2024 08:08:58.711131096 CET	58320	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:08:58.833396912 CET	53	58320	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.220968008 CET	56114	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.343795061 CET	53	56114	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.344052076 CET	42255	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.467344999 CET	53	42255	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.467591047 CET	40919	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.589910030 CET	53	40919	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.590085030 CET	51268	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.712886095 CET	53	51268	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.713130951 CET	48686	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.835549116 CET	53	48686	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.835819960 CET	59515	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:00.957999945 CET	53	59515	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:00.958187103 CET	36261	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:01.082942009 CET	53	36261	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:01.083197117 CET	41257	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:01.206909895 CET	53	41257	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:01.207179070 CET	38849	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:01.329499006 CET	53	38849	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:01.329705954 CET	37307	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:01.452142954 CET	53	37307	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:02.839796066 CET	48764	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:02.962107897 CET	53	48764	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:02.962491035 CET	50128	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.084850073 CET	53	50128	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.085216045 CET	55073	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.207520008 CET	53	55073	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.207825899 CET	49283	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.330545902 CET	53	49283	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.330950975 CET	33062	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.453392982 CET	53	33062	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.453839064 CET	48471	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.576210022 CET	53	48471	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.576417923 CET	41917	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.698821068 CET	53	41917	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.699073076 CET	59673	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.821290970 CET	53	59673	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.821614981 CET	33342	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:03.944197893 CET	53	33342	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:03.944484949 CET	41250	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:04.066826105 CET	53	41250	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:05.452847958 CET	43614	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:05.576634884 CET	53	43614	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:05.576891899 CET	57885	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:05.700344086 CET	53	57885	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:05.700567961 CET	37951	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:05.822839022 CET	53	37951	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:05.823231936 CET	57428	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:05.945580959 CET	53	57428	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:05.945924044 CET	45869	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.068198919 CET	53	45869	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:06.068615913 CET	46397	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.191131115 CET	53	46397	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:06.191555977 CET	60782	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.314975977 CET	53	60782	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:06.315413952 CET	49498	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.437704086 CET	53	49498	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:06.438218117 CET	53200	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.560442924 CET	53	53200	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:06.560903072 CET	41805	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:06.683165073 CET	53	41805	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.070208073 CET	41881	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.196157932 CET	53	41881	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.196589947 CET	56776	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.319191933 CET	53	56776	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.319645882 CET	48368	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.442421913 CET	53	48368	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.442717075 CET	36799	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.566994905 CET	53	36799	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.567624092 CET	49136	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.691612959 CET	53	49136	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.692071915 CET	34519	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.814440012 CET	53	34519	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.814790010 CET	53002	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:08.937050104 CET	53	53002	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:08.937468052 CET	41485	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:09.059817076 CET	53	41485	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:09.060234070 CET	60845	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:09.183212042 CET	53	60845	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:09.183756113 CET	47891	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:09.306329966 CET	53	47891	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:10.691842079 CET	44993	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:10.814133883 CET	53	44993	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:10.814585924 CET	42067	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:10.936865091 CET	53	42067	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:10.937362909 CET	36590	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.059514999 CET	53	36590	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.059787035 CET	57921	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.183242083 CET	53	57921	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.183799982 CET	34579	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.306202888 CET	53	34579	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.306606054 CET	40966	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.428863049 CET	53	40966	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.429368019 CET	52805	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.552520037 CET	53	52805	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.553078890 CET	42067	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.676086903 CET	53	42067	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.676522970 CET	36351	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.798685074 CET	53	36351	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:11.799247980 CET	45053	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:11.923260927 CET	53	45053	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.309271097 CET	53154	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:13.431504965 CET	53	53154	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.431725025 CET	48803	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:13.553947926 CET	53	48803	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.554115057 CET	48274	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:13.676431894 CET	53	48274	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.676697016 CET	54353	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:13.798957109 CET	53	54353	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.799238920 CET	59416	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:13.921530962 CET	53	59416	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:13.921780109 CET	50172	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:14.044089079 CET	53	50172	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:14.044517040 CET	50627	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:14.220751047 CET	53	50627	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:14.221178055 CET	51869	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:14.473643064 CET	53	51869	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:14.473858118 CET	56128	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:14.596149921 CET	53	56128	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:14.596580029 CET	48414	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:14.718708038 CET	53	48414	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.103924990 CET	34931	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.226074934 CET	53	34931	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.226351023 CET	36374	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.348571062 CET	53	36374	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.348874092 CET	45510	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.471088886 CET	53	45510	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.471306086 CET	49945	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.593585014 CET	53	49945	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.593786955 CET	59078	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.717226982 CET	53	59078	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.717525005 CET	44470	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.839721918 CET	53	44470	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.839943886 CET	59414	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:16.962296963 CET	53	59414	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:16.962755919 CET	44720	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:17.085261106 CET	53	44720	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:17.085546017 CET	36349	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:17.207683086 CET	53	36349	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:17.208189964 CET	36675	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:17.330449104 CET	53	36675	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:18.715015888 CET	41342	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:18.837336063 CET	53	41342	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:18.837589979 CET	40663	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:18.959876060 CET	53	40663	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:18.960166931 CET	36765	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.082449913 CET	53	36765	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.082644939 CET	37518	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.205014944 CET	53	37518	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.205231905 CET	53930	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.328349113 CET	53	53930	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.328669071 CET	46601	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.450968027 CET	53	46601	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.451222897 CET	40303	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.573508978 CET	53	40303	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.573858976 CET	57881	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.696154118 CET	53	57881	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.696662903 CET	41442	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.818912029 CET	53	41442	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:19.819294930 CET	44393	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:19.941467047 CET	53	44393	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.328002930 CET	51655	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:21.450377941 CET	53	51655	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.450853109 CET	58812	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:21.573113918 CET	53	58812	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.573544979 CET	44553	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:21.697382927 CET	53	44553	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.697925091 CET	49033	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:21.820202112 CET	53	49033	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.820702076 CET	49337	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:21.942958117 CET	53	49337	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:21.943382025 CET	42217	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:22.065608025 CET	53	42217	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:22.065926075 CET	35634	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:22.188297033 CET	53	35634	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:22.188555956 CET	59814	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:22.310839891 CET	53	59814	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:22.311161041 CET	57119	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:22.433464050 CET	53	57119	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:22.433954000 CET	47330	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:22.556371927 CET	53	47330	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:23.942574978 CET	42154	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.064747095 CET	53	42154	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.065038919 CET	59816	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.188440084 CET	53	59816	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.188776016 CET	44492	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.311058998 CET	53	44492	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.311487913 CET	54643	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.433774948 CET	53	54643	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.433981895 CET	42912	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.556343079 CET	53	42912	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.556730032 CET	55909	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.678935051 CET	53	55909	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.679205894 CET	46386	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.801538944 CET	53	46386	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.801790953 CET	40959	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:24.924143076 CET	53	40959	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:24.924472094 CET	49785	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:25.046827078 CET	53	49785	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:25.047148943 CET	39720	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:25.169363022 CET	53	39720	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:26.555424929 CET	56995	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:26.677721977 CET	53	56995	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:26.678005934 CET	39923	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:26.800291061 CET	53	39923	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:26.800578117 CET	55852	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:26.922851086 CET	53	55852	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:26.923286915 CET	44278	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.045835018 CET	53	44278	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.046175957 CET	35100	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.168490887 CET	53	35100	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.168967009 CET	52577	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.291279078 CET	53	52577	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.291805029 CET	36540	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.415132046 CET	53	36540	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.415467978 CET	49540	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.537749052 CET	53	49540	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.537947893 CET	49827	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.660469055 CET	53	49827	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:27.660712957 CET	55238	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:27.783062935 CET	53	55238	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.168910980 CET	54307	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.291230917 CET	53	54307	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.291516066 CET	49599	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.413777113 CET	53	49599	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.414179087 CET	33913	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.536516905 CET	53	33913	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.536978006 CET	32976	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.659287930 CET	53	32976	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.659521103 CET	54412	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.782248020 CET	53	54412	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.782561064 CET	49856	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:29.905133009 CET	53	49856	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:29.905622959 CET	56588	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:30.027904987 CET	53	56588	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:30.028213978 CET	43511	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:30.157352924 CET	53	43511	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:30.157802105 CET	54623	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:30.280208111 CET	53	54623	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:30.280404091 CET	40251	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:30.402576923 CET	53	40251	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:31.789110899 CET	54902	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:31.911526918 CET	53	54902	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:31.911854029 CET	41968	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.034141064 CET	53	41968	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.034579039 CET	45415	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.157382965 CET	53	45415	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.157809019 CET	40261	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.280114889 CET	53	40261	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.280390024 CET	44670	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.404156923 CET	53	44670	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.404412031 CET	36083	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.528083086 CET	53	36083	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.528384924 CET	38949	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.650666952 CET	53	38949	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.651057959 CET	37751	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.773209095 CET	53	37751	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.773955107 CET	48084	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:32.896181107 CET	53	48084	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:32.896564960 CET	40769	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:33.019023895 CET	53	40769	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:34.403202057 CET	44524	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:34.525419950 CET	53	44524	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:34.525772095 CET	33175	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:34.648045063 CET	53	33175	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:34.648289919 CET	48360	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:34.770649910 CET	53	48360	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:34.770986080 CET	35245	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:34.893475056 CET	53	35245	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:34.893899918 CET	34412	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.016483068 CET	53	34412	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:35.016781092 CET	52344	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.141241074 CET	53	52344	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:35.141566038 CET	32791	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.263780117 CET	53	32791	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:35.264127970 CET	52451	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.386689901 CET	53	52451	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:35.387167931 CET	51645	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.509506941 CET	53	51645	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:35.509964943 CET	45679	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:35.632224083 CET	53	45679	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.154109955 CET	52258	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.276473045 CET	53	52258	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.276725054 CET	50289	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.399204016 CET	53	50289	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.399617910 CET	42290	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.521862030 CET	53	42290	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.522320032 CET	47784	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.644589901 CET	53	47784	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.644993067 CET	52406	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.767244101 CET	53	52406	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.767569065 CET	45403	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:37.889756918 CET	53	45403	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:37.889914989 CET	34170	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:38.012104988 CET	53	34170	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:38.012252092 CET	37709	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:38.134552002 CET	53	37709	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:38.134741068 CET	57206	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:38.256886005 CET	53	57206	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:38.257025003 CET	35606	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:38.379224062 CET	53	35606	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:39.765278101 CET	33935	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:39.887626886 CET	53	33935	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:39.887928963 CET	42460	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.010423899 CET	53	42460	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.010713100 CET	33012	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.133023977 CET	53	33012	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.133306980 CET	47345	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.255705118 CET	53	47345	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.255999088 CET	57085	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.378158092 CET	53	57085	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.378441095 CET	32932	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.500685930 CET	53	32932	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.500896931 CET	47006	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.623250961 CET	53	47006	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.623528004 CET	32803	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.745642900 CET	53	32803	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.745923996 CET	58024	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.868408918 CET	53	58024	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:40.868670940 CET	59654	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:40.990986109 CET	53	59654	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.376399994 CET	58903	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:42.498642921 CET	53	58903	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.498897076 CET	35538	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:42.621879101 CET	53	35538	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.622128963 CET	34371	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:42.747963905 CET	53	34371	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.748234034 CET	59382	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:42.870537043 CET	53	59382	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.870763063 CET	33295	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:42.993038893 CET	53	33295	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:42.993309021 CET	40271	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:43.115982056 CET	53	40271	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:43.116254091 CET	51575	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:43.238482952 CET	53	51575	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:43.238683939 CET	39999	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:43.360995054 CET	53	39999	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:43.361198902 CET	36223	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:43.483549118 CET	53	36223	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:43.483805895 CET	57200	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:43.606072903 CET	53	57200	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:44.991652966 CET	34782	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.113960028 CET	53	34782	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.114274979 CET	34410	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.236543894 CET	53	34410	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.236850977 CET	41162	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.359462976 CET	53	41162	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.359740973 CET	51980	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.481966972 CET	53	51980	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.482258081 CET	38274	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.604540110 CET	53	38274	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.604763031 CET	52573	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.727154016 CET	53	52573	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.727396965 CET	60386	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.849668980 CET	53	60386	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.849849939 CET	55671	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:45.972084045 CET	53	55671	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:45.972361088 CET	47787	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:46.100480080 CET	53	47787	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:46.100783110 CET	38236	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:46.223139048 CET	53	38236	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:47.610681057 CET	60384	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:47.735697985 CET	53	60384	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:47.736087084 CET	53193	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:47.858908892 CET	53	53193	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:47.859191895 CET	58739	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:47.981844902 CET	53	58739	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:47.982141018 CET	43556	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.104785919 CET	53	43556	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.105161905 CET	36167	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.227560997 CET	53	36167	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.227829933 CET	45412	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.350332022 CET	53	45412	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.350631952 CET	34460	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.473059893 CET	53	34460	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.473429918 CET	35263	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.595971107 CET	53	35263	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.596268892 CET	50644	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.719193935 CET	53	50644	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:48.719470024 CET	58641	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:48.841897964 CET	53	58641	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.230859995 CET	49779	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.353482008 CET	53	49779	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.353773117 CET	37897	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.476078987 CET	53	37897	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.476597071 CET	37768	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.598977089 CET	53	37768	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.599426985 CET	41897	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.721884012 CET	53	41897	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.722486019 CET	57664	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.845573902 CET	53	57664	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.846008062 CET	34476	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:50.968322992 CET	53	34476	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:50.968700886 CET	52985	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:51.091571093 CET	53	52985	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:51.091774940 CET	54596	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:51.213888884 CET	53	54596	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:51.214152098 CET	56451	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:51.336309910 CET	53	56451	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:51.336546898 CET	45656	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:51.458681107 CET	53	45656	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:52.843571901 CET	49223	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:52.965886116 CET	53	49223	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:52.966146946 CET	55056	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.088732004 CET	53	55056	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.089046001 CET	46659	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.211272955 CET	53	46659	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.211719036 CET	50846	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.333975077 CET	53	50846	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.334281921 CET	33044	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.456635952 CET	53	33044	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.456871033 CET	37781	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.580935001 CET	53	37781	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.581120968 CET	40971	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.703524113 CET	53	40971	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.703830004 CET	42972	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.826056957 CET	53	42972	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.826297998 CET	42914	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:53.948785067 CET	53	42914	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:53.948966980 CET	47192	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:54.073899031 CET	53	47192	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:55.463491917 CET	38860	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:55.586384058 CET	53	38860	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:55.586813927 CET	52997	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:55.709233999 CET	53	52997	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:55.709539890 CET	41028	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:55.831890106 CET	53	41028	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:55.832274914 CET	57039	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:55.954459906 CET	53	57039	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:55.954924107 CET	34862	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.077208042 CET	53	34862	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:56.077662945 CET	35438	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.199912071 CET	53	35438	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:56.200334072 CET	51080	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.322563887 CET	53	51080	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:56.322824001 CET	55961	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.445111990 CET	53	55961	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:56.445400000 CET	53144	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.567881107 CET	53	53144	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:56.568135977 CET	38234	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:56.690246105 CET	53	38234	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.075769901 CET	33560	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.198123932 CET	53	33560	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.198556900 CET	48958	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.320848942 CET	53	48958	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.321070910 CET	39737	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.443511009 CET	53	39737	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.443695068 CET	52396	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.566095114 CET	53	52396	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.566294909 CET	38247	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.688663006 CET	53	38247	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.688986063 CET	56509	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.811502934 CET	53	56509	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.811664104 CET	47044	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:58.933949947 CET	53	47044	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:58.934077978 CET	33854	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:59.056596041 CET	53	33854	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:59.057030916 CET	47724	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:59.179184914 CET	53	47724	8.8.8.8	192.168.2.13
Dec 19, 2024 08:09:59.179373026 CET	47399	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:09:59.301769018 CET	53	47399	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:00.689291000 CET	59890	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:00.811691999 CET	53	59890	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:00.812011003 CET	51123	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:00.934556961 CET	53	51123	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:00.934935093 CET	56437	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.057446003 CET	53	56437	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.058254004 CET	52683	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.180716991 CET	53	52683	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.181034088 CET	48473	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.304610968 CET	53	48473	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.304887056 CET	52400	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.427234888 CET	53	52400	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.427571058 CET	34585	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.549859047 CET	53	34585	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.550148964 CET	52232	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.672633886 CET	53	52232	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.674014091 CET	45581	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.796487093 CET	53	45581	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:01.796788931 CET	32809	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:01.919584990 CET	53	32809	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.305459976 CET	47977	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:03.428101063 CET	53	47977	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.428476095 CET	45129	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:03.552181959 CET	53	45129	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.552645922 CET	34815	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:03.676178932 CET	53	34815	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.676491976 CET	52721	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:03.800349951 CET	53	52721	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.800529957 CET	33738	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:03.923018932 CET	53	33738	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:03.923185110 CET	45474	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:04.045425892 CET	53	45474	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:04.045712948 CET	47594	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:04.168035984 CET	53	47594	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:04.168220043 CET	41708	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:04.290482998 CET	53	41708	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:04.290976048 CET	53823	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:04.415050030 CET	53	53823	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:04.415273905 CET	56745	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:04.539094925 CET	53	56745	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:05.924931049 CET	57742	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.047116041 CET	53	57742	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.047355890 CET	40232	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.169790983 CET	53	40232	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.170061111 CET	56505	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.295103073 CET	53	56505	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.295375109 CET	38130	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.417715073 CET	53	38130	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.418154001 CET	39874	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.544462919 CET	53	39874	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.544749975 CET	38664	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.670331001 CET	53	38664	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.670582056 CET	39921	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.793272018 CET	53	39921	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.793473959 CET	54467	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:06.915693998 CET	53	54467	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:06.916157007 CET	42558	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:07.038592100 CET	53	42558	8.8.8.8	192.168.2.13
Dec 19, 2024 08:10:07.039002895 CET	53643	53	192.168.2.13	8.8.8.8
Dec 19, 2024 08:10:07.161551952 CET	53	53643	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:08:03.011205912 CET	192.168.2.13	8.8.8.8	0xf597	Standard query (0)	raw.cardiacpure.ru	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:08:03.146030903 CET	192.168.2.13	8.8.8.8	0xb5fa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	339	false
Dec 19, 2024 08:08:03.268704891 CET	192.168.2.13	8.8.8.8	0xb5fa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	339	false
Dec 19, 2024 08:08:03.391586065 CET	192.168.2.13	8.8.8.8	0xb5fa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	339	false
Dec 19, 2024 08:08:03.514072895 CET	192.168.2.13	8.8.8.8	0xb5fa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	339	false
Dec 19, 2024 08:08:03.636929035 CET	192.168.2.13	8.8.8.8	0xb5fa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	339	false
Dec 19, 2024 08:08:05.762435913 CET	192.168.2.13	8.8.8.8	0x45f7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	341	false
Dec 19, 2024 08:08:05.885696888 CET	192.168.2.13	8.8.8.8	0x45f7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 19, 2024 08:08:06.008897066 CET	192.168.2.13	8.8.8.8	0x45f7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 19, 2024 08:08:06.131519079 CET	192.168.2.13	8.8.8.8	0x45f7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 19, 2024 08:08:06.256504059 CET	192.168.2.13	8.8.8.8	0x45f7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 19, 2024 08:08:08.379174948 CET	192.168.2.13	8.8.8.8	0x952a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	344	false
Dec 19, 2024 08:08:08.502125978 CET	192.168.2.13	8.8.8.8	0x952a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	344	false
Dec 19, 2024 08:08:08.624757051 CET	192.168.2.13	8.8.8.8	0x952a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	344	false
Dec 19, 2024 08:08:08.747687101 CET	192.168.2.13	8.8.8.8	0x952a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	344	false
Dec 19, 2024 08:08:08.870747089 CET	192.168.2.13	8.8.8.8	0x952a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	344	false
Dec 19, 2024 08:08:10.994374037 CET	192.168.2.13	8.8.8.8	0x8da6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	347	false
Dec 19, 2024 08:08:11.117257118 CET	192.168.2.13	8.8.8.8	0x8da6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	347	false
Dec 19, 2024 08:08:11.240087032 CET	192.168.2.13	8.8.8.8	0x8da6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	347	false
Dec 19, 2024 08:08:11.362991095 CET	192.168.2.13	8.8.8.8	0x8da6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	347	false
Dec 19, 2024 08:08:11.485584021 CET	192.168.2.13	8.8.8.8	0x8da6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	347	false
Dec 19, 2024 08:08:13.609131098 CET	192.168.2.13	8.8.8.8	0xb669	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	349	false
Dec 19, 2024 08:08:13.731976986 CET	192.168.2.13	8.8.8.8	0xb669	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	349	false
Dec 19, 2024 08:08:13.854716063 CET	192.168.2.13	8.8.8.8	0xb669	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	349	false
Dec 19, 2024 08:08:13.977473974 CET	192.168.2.13	8.8.8.8	0xb669	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 19, 2024 08:08:14.100594044 CET	192.168.2.13	8.8.8.8	0xb669	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 19, 2024 08:08:16.229895115 CET	192.168.2.13	8.8.8.8	0xac01	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	352	false
Dec 19, 2024 08:08:16.352394104 CET	192.168.2.13	8.8.8.8	0xac01	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	352	false
Dec 19, 2024 08:08:16.474889994 CET	192.168.2.13	8.8.8.8	0xac01	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	352	false
Dec 19, 2024 08:08:16.597709894 CET	192.168.2.13	8.8.8.8	0xac01	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	352	false
Dec 19, 2024 08:08:16.721551895 CET	192.168.2.13	8.8.8.8	0xac01	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	352	false
Dec 19, 2024 08:08:18.846442938 CET	192.168.2.13	8.8.8.8	0xc485	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	354	false
Dec 19, 2024 08:08:18.969667912 CET	192.168.2.13	8.8.8.8	0xc485	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	355	false
Dec 19, 2024 08:08:19.092633009 CET	192.168.2.13	8.8.8.8	0xc485	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	355	false
Dec 19, 2024 08:08:19.215325117 CET	192.168.2.13	8.8.8.8	0xc485	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	355	false
Dec 19, 2024 08:08:19.338270903 CET	192.168.2.13	8.8.8.8	0xc485	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	355	false
Dec 19, 2024 08:08:42.368899107 CET	192.168.2.13	8.8.8.8	0xb55c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	378	false
Dec 19, 2024 08:08:42.491388083 CET	192.168.2.13	8.8.8.8	0xb55c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	378	false
Dec 19, 2024 08:08:42.613853931 CET	192.168.2.13	8.8.8.8	0xb55c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	378	false
Dec 19, 2024 08:08:42.736639023 CET	192.168.2.13	8.8.8.8	0xb55c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	378	false
Dec 19, 2024 08:08:42.859330893 CET	192.168.2.13	8.8.8.8	0xb55c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	378	false
Dec 19, 2024 08:08:44.992288113 CET	192.168.2.13	8.8.8.8	0x40f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 19, 2024 08:08:45.114806890 CET	192.168.2.13	8.8.8.8	0x40f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 19, 2024 08:08:45.238141060 CET	192.168.2.13	8.8.8.8	0x40f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 19, 2024 08:08:45.361491919 CET	192.168.2.13	8.8.8.8	0x40f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 19, 2024 08:08:45.484158039 CET	192.168.2.13	8.8.8.8	0x40f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 19, 2024 08:08:47.607358932 CET	192.168.2.13	8.8.8.8	0xe736	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 19, 2024 08:08:47.730067015 CET	192.168.2.13	8.8.8.8	0xe736	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 19, 2024 08:08:47.854186058 CET	192.168.2.13	8.8.8.8	0xe736	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 19, 2024 08:08:47.976768970 CET	192.168.2.13	8.8.8.8	0xe736	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	384	false
Dec 19, 2024 08:08:48.099210978 CET	192.168.2.13	8.8.8.8	0xe736	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	384	false
Dec 19, 2024 08:08:50.347378969 CET	192.168.2.13	8.8.8.8	0xbf55	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 19, 2024 08:08:50.471355915 CET	192.168.2.13	8.8.8.8	0xbf55	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 19, 2024 08:08:50.594439030 CET	192.168.2.13	8.8.8.8	0xbf55	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 19, 2024 08:08:50.720889091 CET	192.168.2.13	8.8.8.8	0xbf55	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 19, 2024 08:08:50.844376087 CET	192.168.2.13	8.8.8.8	0xbf55	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 19, 2024 08:08:52.972598076 CET	192.168.2.13	8.8.8.8	0x4a90	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 19, 2024 08:08:53.096040010 CET	192.168.2.13	8.8.8.8	0x4a90	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 19, 2024 08:08:53.218599081 CET	192.168.2.13	8.8.8.8	0x4a90	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 19, 2024 08:08:53.341017962 CET	192.168.2.13	8.8.8.8	0x4a90	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 19, 2024 08:08:53.464163065 CET	192.168.2.13	8.8.8.8	0x4a90	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 19, 2024 08:08:55.593830109 CET	192.168.2.13	8.8.8.8	0x960b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 19, 2024 08:08:55.716805935 CET	192.168.2.13	8.8.8.8	0x960b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 19, 2024 08:08:55.839478970 CET	192.168.2.13	8.8.8.8	0x960b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 19, 2024 08:08:55.962619066 CET	192.168.2.13	8.8.8.8	0x960b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	392	false
Dec 19, 2024 08:08:56.085247993 CET	192.168.2.13	8.8.8.8	0x960b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	392	false
Dec 19, 2024 08:08:58.220122099 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 19, 2024 08:08:58.342602968 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 19, 2024 08:08:58.465188980 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 19, 2024 08:08:58.588063002 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 19, 2024 08:08:58.711131096 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 19, 2024 08:09:00.835819960 CET	192.168.2.13	8.8.8.8	0x8455	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 19, 2024 08:09:00.958187103 CET	192.168.2.13	8.8.8.8	0x8455	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 19, 2024 08:09:01.083197117 CET	192.168.2.13	8.8.8.8	0x8455	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 19, 2024 08:09:01.207179070 CET	192.168.2.13	8.8.8.8	0x8455	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 19, 2024 08:09:01.329705954 CET	192.168.2.13	8.8.8.8	0x8455	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 19, 2024 08:09:03.453839064 CET	192.168.2.13	8.8.8.8	0x1c84	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 19, 2024 08:09:03.576417923 CET	192.168.2.13	8.8.8.8	0x1c84	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 19, 2024 08:09:03.699073076 CET	192.168.2.13	8.8.8.8	0x1c84	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 19, 2024 08:09:03.821614981 CET	192.168.2.13	8.8.8.8	0x1c84	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 19, 2024 08:09:03.944484949 CET	192.168.2.13	8.8.8.8	0x1c84	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	400	false
Dec 19, 2024 08:09:06.068615913 CET	192.168.2.13	8.8.8.8	0xa56f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 19, 2024 08:09:06.191555977 CET	192.168.2.13	8.8.8.8	0xa56f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 19, 2024 08:09:06.315413952 CET	192.168.2.13	8.8.8.8	0xa56f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 19, 2024 08:09:06.438218117 CET	192.168.2.13	8.8.8.8	0xa56f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 19, 2024 08:09:06.560903072 CET	192.168.2.13	8.8.8.8	0xa56f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 19, 2024 08:09:08.692071915 CET	192.168.2.13	8.8.8.8	0xc37b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 19, 2024 08:09:08.814790010 CET	192.168.2.13	8.8.8.8	0xc37b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 19, 2024 08:09:08.937468052 CET	192.168.2.13	8.8.8.8	0xc37b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 19, 2024 08:09:09.060234070 CET	192.168.2.13	8.8.8.8	0xc37b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 19, 2024 08:09:09.183756113 CET	192.168.2.13	8.8.8.8	0xc37b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 19, 2024 08:09:11.306606054 CET	192.168.2.13	8.8.8.8	0x2b18	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 19, 2024 08:09:11.429368019 CET	192.168.2.13	8.8.8.8	0x2b18	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 19, 2024 08:09:11.553078890 CET	192.168.2.13	8.8.8.8	0x2b18	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 19, 2024 08:09:11.676522970 CET	192.168.2.13	8.8.8.8	0x2b18	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 19, 2024 08:09:11.799247980 CET	192.168.2.13	8.8.8.8	0x2b18	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 19, 2024 08:09:13.921780109 CET	192.168.2.13	8.8.8.8	0x4f87	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 19, 2024 08:09:14.044517040 CET	192.168.2.13	8.8.8.8	0x4f87	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 19, 2024 08:09:14.221178055 CET	192.168.2.13	8.8.8.8	0x4f87	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 19, 2024 08:09:14.473858118 CET	192.168.2.13	8.8.8.8	0x4f87	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 19, 2024 08:09:14.596580029 CET	192.168.2.13	8.8.8.8	0x4f87	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 19, 2024 08:09:16.717525005 CET	192.168.2.13	8.8.8.8	0xd91a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 19, 2024 08:09:16.839943886 CET	192.168.2.13	8.8.8.8	0xd91a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 19, 2024 08:09:16.962755919 CET	192.168.2.13	8.8.8.8	0xd91a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 19, 2024 08:09:17.085546017 CET	192.168.2.13	8.8.8.8	0xd91a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 19, 2024 08:09:17.208189964 CET	192.168.2.13	8.8.8.8	0xd91a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 19, 2024 08:09:19.328669071 CET	192.168.2.13	8.8.8.8	0x8d73	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 19, 2024 08:09:19.451222897 CET	192.168.2.13	8.8.8.8	0x8d73	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 19, 2024 08:09:19.573858976 CET	192.168.2.13	8.8.8.8	0x8d73	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 19, 2024 08:09:19.696662903 CET	192.168.2.13	8.8.8.8	0x8d73	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 19, 2024 08:09:19.819294930 CET	192.168.2.13	8.8.8.8	0x8d73	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 19, 2024 08:09:21.943382025 CET	192.168.2.13	8.8.8.8	0xbcaa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	418	false
Dec 19, 2024 08:09:22.065926075 CET	192.168.2.13	8.8.8.8	0xbcaa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	418	false
Dec 19, 2024 08:09:22.188555956 CET	192.168.2.13	8.8.8.8	0xbcaa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	418	false
Dec 19, 2024 08:09:22.311161041 CET	192.168.2.13	8.8.8.8	0xbcaa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	418	false
Dec 19, 2024 08:09:22.433954000 CET	192.168.2.13	8.8.8.8	0xbcaa	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	418	false
Dec 19, 2024 08:09:24.556730032 CET	192.168.2.13	8.8.8.8	0x138	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 19, 2024 08:09:24.679205894 CET	192.168.2.13	8.8.8.8	0x138	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 19, 2024 08:09:24.801790953 CET	192.168.2.13	8.8.8.8	0x138	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 19, 2024 08:09:24.924472094 CET	192.168.2.13	8.8.8.8	0x138	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	421	false
Dec 19, 2024 08:09:25.047148943 CET	192.168.2.13	8.8.8.8	0x138	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	421	false
Dec 19, 2024 08:09:27.168967009 CET	192.168.2.13	8.8.8.8	0xb2be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 19, 2024 08:09:27.291805029 CET	192.168.2.13	8.8.8.8	0xb2be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 19, 2024 08:09:27.415467978 CET	192.168.2.13	8.8.8.8	0xb2be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 19, 2024 08:09:27.537947893 CET	192.168.2.13	8.8.8.8	0xb2be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 19, 2024 08:09:27.660712957 CET	192.168.2.13	8.8.8.8	0xb2be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 19, 2024 08:09:29.782561064 CET	192.168.2.13	8.8.8.8	0xaa2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 19, 2024 08:09:29.905622959 CET	192.168.2.13	8.8.8.8	0xaa2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	426	false
Dec 19, 2024 08:09:30.028213978 CET	192.168.2.13	8.8.8.8	0xaa2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	426	false
Dec 19, 2024 08:09:30.157802105 CET	192.168.2.13	8.8.8.8	0xaa2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	426	false
Dec 19, 2024 08:09:30.280404091 CET	192.168.2.13	8.8.8.8	0xaa2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	426	false
Dec 19, 2024 08:09:32.404412031 CET	192.168.2.13	8.8.8.8	0x4349	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 19, 2024 08:09:32.528384924 CET	192.168.2.13	8.8.8.8	0x4349	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 19, 2024 08:09:32.651057959 CET	192.168.2.13	8.8.8.8	0x4349	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 19, 2024 08:09:32.773955107 CET	192.168.2.13	8.8.8.8	0x4349	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 19, 2024 08:09:32.896564960 CET	192.168.2.13	8.8.8.8	0x4349	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	429	false
Dec 19, 2024 08:09:35.016781092 CET	192.168.2.13	8.8.8.8	0x6a5a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 08:09:35.141566038 CET	192.168.2.13	8.8.8.8	0x6a5a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 08:09:35.264127970 CET	192.168.2.13	8.8.8.8	0x6a5a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 08:09:35.387167931 CET	192.168.2.13	8.8.8.8	0x6a5a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 08:09:35.509964943 CET	192.168.2.13	8.8.8.8	0x6a5a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 08:09:37.767569065 CET	192.168.2.13	8.8.8.8	0x2001	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 19, 2024 08:09:37.889914989 CET	192.168.2.13	8.8.8.8	0x2001	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	434	false
Dec 19, 2024 08:09:38.012252092 CET	192.168.2.13	8.8.8.8	0x2001	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	434	false
Dec 19, 2024 08:09:38.134741068 CET	192.168.2.13	8.8.8.8	0x2001	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	434	false
Dec 19, 2024 08:09:38.257025003 CET	192.168.2.13	8.8.8.8	0x2001	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	434	false
Dec 19, 2024 08:09:40.378441095 CET	192.168.2.13	8.8.8.8	0xe9db	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 08:09:40.500896931 CET	192.168.2.13	8.8.8.8	0xe9db	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 08:09:40.623528004 CET	192.168.2.13	8.8.8.8	0xe9db	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 08:09:40.745923996 CET	192.168.2.13	8.8.8.8	0xe9db	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 08:09:40.868670940 CET	192.168.2.13	8.8.8.8	0xe9db	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 08:09:42.993309021 CET	192.168.2.13	8.8.8.8	0x9802	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 19, 2024 08:09:43.116254091 CET	192.168.2.13	8.8.8.8	0x9802	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 19, 2024 08:09:43.238683939 CET	192.168.2.13	8.8.8.8	0x9802	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 19, 2024 08:09:43.361198902 CET	192.168.2.13	8.8.8.8	0x9802	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 19, 2024 08:09:43.483805895 CET	192.168.2.13	8.8.8.8	0x9802	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 19, 2024 08:09:45.604763031 CET	192.168.2.13	8.8.8.8	0xc98a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 19, 2024 08:09:45.727396965 CET	192.168.2.13	8.8.8.8	0xc98a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 19, 2024 08:09:45.849849939 CET	192.168.2.13	8.8.8.8	0xc98a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 19, 2024 08:09:45.972361088 CET	192.168.2.13	8.8.8.8	0xc98a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	442	false
Dec 19, 2024 08:09:46.100783110 CET	192.168.2.13	8.8.8.8	0xc98a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	442	false
Dec 19, 2024 08:09:48.227829933 CET	192.168.2.13	8.8.8.8	0xe1f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 19, 2024 08:09:48.350631952 CET	192.168.2.13	8.8.8.8	0xe1f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 19, 2024 08:09:48.473429918 CET	192.168.2.13	8.8.8.8	0xe1f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 19, 2024 08:09:48.596268892 CET	192.168.2.13	8.8.8.8	0xe1f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 19, 2024 08:09:48.719470024 CET	192.168.2.13	8.8.8.8	0xe1f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 19, 2024 08:09:50.846008062 CET	192.168.2.13	8.8.8.8	0x17cc	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 19, 2024 08:09:50.968700886 CET	192.168.2.13	8.8.8.8	0x17cc	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	447	false
Dec 19, 2024 08:09:51.091774940 CET	192.168.2.13	8.8.8.8	0x17cc	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	447	false
Dec 19, 2024 08:09:51.214152098 CET	192.168.2.13	8.8.8.8	0x17cc	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	447	false
Dec 19, 2024 08:09:51.336546898 CET	192.168.2.13	8.8.8.8	0x17cc	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	447	false
Dec 19, 2024 08:09:53.456871033 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 19, 2024 08:09:53.581120968 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 19, 2024 08:09:53.703830004 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 19, 2024 08:09:53.826297998 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 19, 2024 08:09:53.948966980 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	450	false
Dec 19, 2024 08:09:56.077662945 CET	192.168.2.13	8.8.8.8	0x407	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 19, 2024 08:09:56.200334072 CET	192.168.2.13	8.8.8.8	0x407	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 19, 2024 08:09:56.322824001 CET	192.168.2.13	8.8.8.8	0x407	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 19, 2024 08:09:56.445400000 CET	192.168.2.13	8.8.8.8	0x407	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 19, 2024 08:09:56.568135977 CET	192.168.2.13	8.8.8.8	0x407	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 19, 2024 08:09:58.688986063 CET	192.168.2.13	8.8.8.8	0x3c16	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 19, 2024 08:09:58.811664104 CET	192.168.2.13	8.8.8.8	0x3c16	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 19, 2024 08:09:58.934077978 CET	192.168.2.13	8.8.8.8	0x3c16	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	455	false
Dec 19, 2024 08:09:59.057030916 CET	192.168.2.13	8.8.8.8	0x3c16	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	455	false
Dec 19, 2024 08:09:59.179373026 CET	192.168.2.13	8.8.8.8	0x3c16	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	455	false
Dec 19, 2024 08:10:01.304887056 CET	192.168.2.13	8.8.8.8	0xd0f5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 19, 2024 08:10:01.427571058 CET	192.168.2.13	8.8.8.8	0xd0f5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 19, 2024 08:10:01.550148964 CET	192.168.2.13	8.8.8.8	0xd0f5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 19, 2024 08:10:01.674014091 CET	192.168.2.13	8.8.8.8	0xd0f5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 19, 2024 08:10:01.796788931 CET	192.168.2.13	8.8.8.8	0xd0f5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 19, 2024 08:10:03.923185110 CET	192.168.2.13	8.8.8.8	0x68ab	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 19, 2024 08:10:04.045712948 CET	192.168.2.13	8.8.8.8	0x68ab	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 19, 2024 08:10:04.168220043 CET	192.168.2.13	8.8.8.8	0x68ab	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 19, 2024 08:10:04.290976048 CET	192.168.2.13	8.8.8.8	0x68ab	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 19, 2024 08:10:04.415273905 CET	192.168.2.13	8.8.8.8	0x68ab	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 19, 2024 08:10:06.544749975 CET	192.168.2.13	8.8.8.8	0x2def	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 19, 2024 08:10:06.670582056 CET	192.168.2.13	8.8.8.8	0x2def	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 19, 2024 08:10:06.793473959 CET	192.168.2.13	8.8.8.8	0x2def	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 19, 2024 08:10:06.916157007 CET	192.168.2.13	8.8.8.8	0x2def	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	463	false
Dec 19, 2024 08:10:07.039002895 CET	192.168.2.13	8.8.8.8	0x2def	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	463	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:08:03.145689964 CET	8.8.8.8	192.168.2.13	0xf597	No error (0)	raw.cardiacpure.ru		178.215.238.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: dash PID: 5412, Parent PID: 3591

General

Start time (UTC):	07:07:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5412, Parent PID: 3591

General

Start time (UTC):	07:07:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5413, Parent PID: 3591

General

Start time (UTC):	07:07:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5413, Parent PID: 3591

General

Start time (UTC):	07:07:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.SSlUvf1o6L /tmp/tmp.LASwDNGbfu /tmp/tmp.BzY0S5xW07
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: Aqua.i686.elf PID: 5425, Parent PID: 5347

General

Start time (UTC):	07:08:01
Start date (UTC):	19/12/2024
Path:	/tmp/Aqua.i686.elf
Arguments:	/tmp/Aqua.i686.elf
File size:	104872 bytes
MD5 hash:	5d14cf8d9e6696a9ef42ce5b251a2a1f

Chronological Activities

Analysis Process: Aqua.i686.elf PID: 5426, Parent PID: 5425

General

Start time (UTC):	07:08:01
Start date (UTC):	19/12/2024
Path:	/tmp/Aqua.i686.elf
Arguments:	-
File size:	104872 bytes
MD5 hash:	5d14cf8d9e6696a9ef42ce5b251a2a1f

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.i686.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: dash PID: 5412, Parent PID: 3591

General

Chronological Activities

Analysis Process: rm PID: 5412, Parent PID: 3591

General

Chronological Activities

Analysis Process: dash PID: 5413, Parent PID: 3591

General

Chronological Activities

Analysis Process: rm PID: 5413, Parent PID: 3591

General

Chronological Activities

Analysis Process: Aqua.i686.elf PID: 5425, Parent PID: 5347

General

Chronological Activities

Analysis Process: Aqua.i686.elf PID: 5426, Parent PID: 5425

General

Chronological Activities

Linux Analysis Report
Aqua.i686.elf